copyright
GlobalProtect Overview
Get Started
- Create Interfaces and Zones for GlobalProtect
- Enable SSL Between GlobalProtect Components
Authentication
GlobalProtect Gateways
GlobalProtect Portals
GlobalProtect Clients
- Deploy the GlobalProtect Client Software
- Deploy Agent Settings Transparently
GlobalProtect Clientless VPN
Mobile Endpoint Management
Host Information
GlobalProtect Quick Configs
GlobalProtect Architecture
GlobalProtect Cryptography

End-of-Life (EoL)

Deploy Shared Client Certificates for Authentication

To confirm that an endpoint user belongs to your organization, you can use the same client certificate for all endpoints or generate separate certificates to deploy with a particular agent configuration. Use this workflow to issue self-signed client certificates for this purpose and deploy them from the portal.

Generate a certificate to deploy to multiple GlobalProtect clients.

Create the root CA certificate for issuing self-signed certificates for the GlobalProtect components.

Select

Device

Certificate Management

Certificates

Device Certificates

and then click

Generate

Use the

Local

certificate type (the default).

Enter a

Certificate Name

. This name cannot contain spaces.

In the

Common Name

field enter a name to identify this certificate as an agent certificate, for example GP_Windows_clients. Because this same certificate will be deployed to all agents using the same configuration, it does not need to uniquely identify a specific user or endpoint.

In the

Signed By

field, select your root CA.

Select an

OCSP Responder

to verify the revocation status of certificates.

Click

to generate the certificate.

Set Up Two-Factor Authentication.

Configure authentication settings in a GlobalProtect portal agent configuration to enable the portal to transparently deploy the client certificate that is

Local

to the firewall to clients that receive the configuration.

Document:GlobalProtect Administrator's Guide

Deploy Shared Client Certificates for Authentication

Table of Contents

Deploy Shared Client Certificates for Authentication

Recommended For You

Recommended Videos